ASA 5510 URL Filtering problem

Unanswered Question

I have a mechanic that is trying to update his vehicle computer through ACDelco's website. It is all Java based. There are 5 tabs on the website that interface with the computer; reading or dumping various programs to update the vehicles.

One of the tabs doesn't work; though they all run essentially the same java based program. I've added the website URL to my exceptions list on the CSC page, and when I click save, it will load (this is do to the soft boot of the ASA). Once the ASA is back up, it doesn't work. I've tried listing his PC IP address as an exception, as well as disabling the URL Filtering, to no avail. The only time it works is during a soft boot of the ASA. Any help or suggestions?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
jjohnston1127 Thu, 08/07/2008 - 06:43
User Badges:
  • Silver, 250 points or more

Do a PING of the ACDelco website he is trying to get to so you can obtain the IP address.

On your access list that passes traffic to the CSC module, create an entry for line one that denies connection from any to that IP address.

For example, your CSC access list is CSC_IN and the IP address of AC Delco is

access-list CSC_IN extended line 1 deny ip any host

This should put the deny statement at the top of the access list before any of your permit statements that pass traffic to the module and prevent it from getting sent to the CSC.


This Discussion